Data subject access request processing systems and related methods

1. A computer-implemented data processing method for verifying a data subject of a data subject access request, the method comprising:

receiving, via an electronic device of the data subject, a request to initiate a transaction between an entity and the data subject, the transaction being initiated by the data subject via a user interface and involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction;

in response to receiving the request to initiate the transaction:

generating a consent receipt for the transaction comprising at least a unique subject identifier and a unique consent receipt key; and

storing transaction data within a web browser associated with the electronic device of the data subject;

storing, by one or more processors, the consent receipt for the transaction;

receiving, by the one or more processors, the data subject access request from the data subject comprising one or more request parameters;

verifying, by the one or more processors, an identity of the data subject based at least in part on the transaction data stored within the web browser by:

accessing, by the one or more processors, the transaction data from the web browser associated with the electronic device of the data subject;

comparing, by the one or more processors, the transaction data from the web browser to the unique consent receipt key; and

determining, by the one or more processors, that the transaction data includes at least one piece of data from the consent receipt key;

in response to verifying the identity of the data subject, processing, by the one or more processors, the data subject access request by identifying one or more pieces of personal data associated with the data subject, the one or more pieces of personal data being stored in one or more data repositories associated with the entity; and

taking, by the one or more processors, one or more actions based at least in part on the data subject access request, the one or more actions including one or more actions related to the one or more pieces of personal data.

2. The computer-implemented data processing method of claim 1 , wherein receiving the request to initiate the transaction comprises receiving the request to initiate the transaction via the web browser.

3. The computer-implemented data processing method of claim 2 , wherein receiving the data subject access request comprises receiving the data subject access request via the web browser.

4. The computer-implemented data processing method of claim 1 , wherein verifying the identity of the data subject based at least in part on the transaction data stored within the web browser comprises:

in response to determining that the transaction data includes at least one piece of data from the consent receipt key, verifying, by the one or more processors, the identity of the data subject.

5. The computer-implemented data processing method of claim 1 , wherein the transaction data stored in the web browser comprises one or more cookies.

6. The computer-implemented data processing method of claim 1 , wherein the data subject access request comprises a request to provide the one or more pieces of data collected as part of the transaction to the data subject.

7. The computer-implemented data processing method of claim 1 , wherein one of the one or more request parameters of the data subject access request comprises a type of data subject access request, and wherein the type of data subject access request is selected from a group consisting of:

a subject's rights request, and

a data subject deletion request.

8. The computer-implemented data processing method of claim 1 , the method further comprising:

determining, based on the transaction data stored within the web browser, that the identity of the data subject cannot be verified; and

in response to determining that the identity of the data subject cannot be verified, terminating the data subject access request.

9. A computer-implemented data processing method for verifying a data subject of a data subject access request, the method comprising:

receiving a request to initiate a transaction between an entity and data subject, the transaction being initiated by the data subject via a user interface and involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction;

in response to receiving the request to initiate the transaction, generating transaction data to identify the data subject's transaction initiated by the data subject;

storing, by one or more processors, the transaction data;

receiving, by the one or more processors, a data subject access request from the data subject comprising one or more request parameters;

verifying, by the one or more processors, an identity of the data subject based at least in part on the transaction data by:

accessing, by the one or more processors, one or more cookies stored within a web browser associated with an electronic device of the data subject,

comparing, by the one or more processors, the one or more cookies stored within the web browser associated with the electronic device of the data subject to the transaction data, and

determining, by the one or more processors, that the one or more cookies stored within the web browser associated with the electronic device of the data subject includes the transaction data;

in response to verifying the identity of the data subject, processing, by the one or more processors, the data subject access request by identifying one or more pieces of personal data associated with the data subject, the one or more pieces of personal data being stored in one or more data repositories associated with the entity; and

taking, by the one or more processors, one or more actions based at least in part on the data subject access request, the one or more actions including one or more actions related to the one or more pieces of personal data.

10. The computer-implemented data processing method of claim 9 , further comprising:

providing the transaction data to the data subject, wherein the transaction data is stored within the web browser associated with an electronic device of the data subject.

11. The computer-implemented data processing method of claim 9 , wherein one of the one or more request parameters of the data subject access request comprises a type of data subject access request, and wherein the type of data subject access request is selected from a group consisting of:

a subject's rights request, and

a data subject deletion request.

12. The computer-implemented data processing method of claim 9 , further comprising:

generating a consent receipt for the transaction comprising at least a unique subject identifier and a unique consent receipt key; and

storing the consent receipt for the transaction.

13. The computer-implemented data processing method of claim 9 , wherein the transaction data comprises a cookie.

14. A data subject access request processing system comprising:

one or more data subject access request management servers;

a plurality of local storage nodes, each of the plurality of local storage nodes being physically located in a distinct geographic location;

one or more processers; and

a memory, wherein the one or more processers are configured for:

receiving a request to initiate a transaction between an entity and a data subject, the transaction being initiated by the data subject via a user interface on an electronic device of the data subject and involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction;

in response to receiving the request to initiate the transaction, generating transaction data to identify the data subject's transaction initiated by the data subject;

storing the transaction data within a web browser associated with the electronic device of the data subject;

receiving a data subject access request from the data subject comprising one or more request parameters;

verifying an identity of the data subject based at least in part on the transaction data by:

accessing one or more cookies stored within the web browser associated with the electronic device of the data subject;

comparing the one or more cookies stored within the web browser associated with the electronic device of the data subject to the transaction data; and

determining that the one or more cookies stored within the web browser associated with the electronic device of the data subject include the transaction data;

in response to verifying the identity of the data subject, processing the data subject access request by identifying one or more pieces of personal data associated with the data subject, the one or more pieces of personal data being stored in one or more data repositories associated with the entity; and

taking one or more actions based at least in part on the data subject access request, the one or more actions including one or more actions related to the one or more pieces of personal data.

15. The data subject access request processing system of claim 14 , the method further comprising storing the transaction data on the electronic device.

16. The data subject access request processing system of claim 14 , wherein verifying the identity of the data subject based at least in part on the transaction data comprises:

in response to determining that the one or more cookies stored within the web browser associated with the electronic device of the data subject include the transaction data, verifying the identity of the data subject.

17. The data subject access request processing system of claim 14 , the method further comprising:

generating a consent receipt for the transaction comprising at least a unique subject identifier and a unique consent receipt key;

identifying a transaction identifier associated with the transaction;

generating a unique consent receipt key for the transaction;

determining the unique subject identifier for the data subject;

electronically storing the unique subject identifier, the unique consent receipt key, and the transaction identifier in the memory;

electronically associating the unique subject identifier, the unique consent receipt key, and the transaction identifier;

generating a consent record for the transaction that includes the unique subject identifier, the unique consent receipt key, and the transaction identifier; and

electronically storing the consent record.

18. The data subject access request processing system of claim 17 , further comprising:

electronically transmitting the consent record to the data subject.

19. The data subject access request processing system of claim 14 , wherein one of the one or more request parameters of the data subject access request comprises a type of data subject access request, and wherein the type of data subject access request is selected from a group consisting of:

a subject's rights request, and

a data subject deletion request.